Suspicious emails or calls claiming to be from AdWords

Google will never send an unsolicited message asking you to provide your password or other sensitive information by email or through a link. If you're asked to share sensitive information, it's probably an attempt to steal your information, also known as "phishing." Sometimes businesses and hackers pretend to be associated with Google to try to trick people into providing more information than they should.

Here's what to do:

  1. Check if it's actually Google trying to reach you. Until you're sure, don't give away any personal information or click any email links.
  2. Protect your account if you think you shared information with an untrustworthy source.
  3. Report the suspicious email, call, or webpage so we can investigate it.

Check if it's actually Google trying to reach you

Emails

  • Check the email's message headers

    If Google sends you an email, the "From" address should contain "@google.com," and the "Return-Path" should also contain "@google.com." If you're contacted by a third party, check to see if they are a Google Partner.

    Google Partners are agencies, marketing professionals and online experts who have been certified by Google to manage AdWords accounts. To achieve Google Partner status, agencies must earn the Google Partner Badge, which signifies that the company is healthy, has happy customers, and demonstrates Google best practices. Learn more about our third party affiliations and about our Google Partners.

  • Check where an email's links are pointing

    Before clicking any links in the email, right-click the link and select Copy Link Address or Copy Link Location. Then paste what you copied into a text document or text field to see what that URL actually says. If the URL is taking you somewhere other than a page on "google.com," this URL might be taking you to a non-Google webpage.

Phone calls

  • Ask the caller to send you an email.

    If the caller is a Google representative, the email they send will have "@google.com" as the "From" address and "Return-Path." If you're contacted by a third party, check to see if they are a Google Partner.

    Google Partners are agencies, marketing professionals and online experts who have been certified by Google to manage AdWords accounts. To achieve Google Partner status, agencies must earn the Google Partner Badge, which signifies that the company is healthy, has happy customers, and demonstrates Google best practices. Learn more about our third party affiliations and about our Google Partners.

  • Ask the caller to provide you with the names and clicks of your campaigns or ad groups.

    A Google representative will be able to access your account details.

Protect your account

If you think you've been contacted by someone who's trying to trick you into sharing your password, credit card numbers, or other sensitive information, don't give out your information. If you think your account is at risk, use the steps below to protect it.

  1. Let us know as soon as possible through our account security form. My account was compromised.
  2. Follow our security tips to secure your account.

Report the suspicious email, call or webpage

After protecting yourself, let us know what happened so we can investigate it.

  • Report an email or call: Use this form to connect with an Online Specialist.
  • Report a webpage: Use this form to give us the URL of a suspicious webpage. If you received a link in an email, don't click the link to visit the webpage. Instead, right-click the link and select Copy Link Address or Copy Link Location. Then paste what you copied into the form.
  • Report a third party: Use this form to let us know about an issue with a company that sells AdWords services.
Was this article helpful?